asqn10d9xm0iq0urztf8mcf8[.]pages[.]dev

The domain asqn10d9xm0iq0urztf8mcf8.pages.dev is actively engaged in brand impersonation, specifically targeting the Gmail brand. The page title 'Google' and the SSL certificate issued by Google Trust Services / WE1 are key indicators of an attempt to appear legitimate to unsuspecting users. This domain poses a significant risk as it can deceive users into sharing sensitive information, such as login credentials, under the false belief that they are interacting with a genuine Google service.

Analysis indicates that asqn10d9xm0iq0urztf8mcf8.pages.dev has been flagged by 3 out of 95 security vendors on VirusTotal, suggesting that it is recognized as a potential threat in the security community. The domain was registered through Cloudflare, Inc. on November 20, 2025, and currently resolves to the IP address 142.250.184.196, which is located in the United States and is associated with AS15169 Google LLC. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further corroborating its malicious intent.

Users who have visited this domain are strongly advised to change their Gmail passwords immediately and enable two-factor authentication (2FA) to secure their accounts. It is also recommended to review account activity for any unauthorized access and report the incident to their respective security teams or online service providers. Staying vigilant and verifying the URL of any Google service before entering credentials is crucial to avoid falling victim to such impersonation attacks.